Skip to main content
GridLock

Gridlock Privacy Policy

Effective date: June 8, 2026 (model-training disclosure added June 11, 2026) Version: 1.1 Company: Gridlock Box LLC, 203 Circle, Terre Haute, IN 47803 Contact: support@gridlockbox.com

This Privacy Policy describes how Gridlock Box LLC ("Gridlock") collects, uses, and discloses personal information when you use the Gridlock application ("App"), the website at https://gridlockbox.com ("Website"), and related services (together, the "Service"). It also describes the privacy rights available to you and how to exercise them. This Privacy Policy is provided as notice of Gridlock's privacy practices; where the law requires consent as the basis for a specific processing activity, Gridlock obtains that consent separately.

1. Scope

This Privacy Policy applies to personal information that Gridlock collects through the App and the Website. It does not apply to third-party services that you reach through links in the Service, which have their own policies. This Privacy Policy, together with any notice presented at the point where information is collected, provides the categories collected, the purposes of use, and retention information required by the California notice-at-collection requirement, as described in the sections below.

2. Information Gridlock Collects

2.1 Information you provide

  • Account information: your name, email address, and the Google account identifier received when you sign in. Gridlock uses Google sign-in for authentication and does not create or store a separate password.
  • Order and transaction information: shipping address, order contents, and order history. Payment card details are entered into and processed by the payment processor; Gridlock does not store full payment card numbers.
  • Scan Data: photographs, video, depth or LiDAR data, three-dimensional mesh data, and dimensions that you capture to generate an insert design. Scan Data is of the product you are packaging, not of people. The App does not perform facial recognition and does not collect biometric identifiers.
  • Communications: messages, support requests, and feedback you send to Gridlock.
  • Business tax-exemption information: if you buy tax-free as a business, the resale or exemption certificate and registration number you provide. This is collected, validated, and stored by a third-party exemption-certificate service, not by Gridlock. Gridlock retains only your exemption status, a certificate reference, the state, and the expiration date. If a sole proprietor provides a Social Security number on a certificate, that number is treated as sensitive personal information and is not retained by Gridlock.

2.2 Information collected automatically

  • Device and usage information: device model, operating system, App version, app and device identifiers, and log data such as access times and error reports.
  • Website analytics: if analytics are deployed, pages viewed and similar usage data collected through cookies and similar technologies on the Website.

3. California Categories of Personal Information

For the purposes of the California Consumer Privacy Act as amended ("CCPA"), Gridlock collects the following statutory categories: identifiers (such as name, email, and device identifiers); customer records (such as shipping address); commercial information (such as orders); internet or network activity (such as usage and log data); visual information (the photographs, video, and scans you capture); and inferences drawn to produce an insert design. Gridlock does not directly receive or retain Social Security numbers, government identifiers, or biometric identifiers. If a business customer provides a resale or exemption certificate that carries a Social Security number used as a tax identifier, that number is sensitive personal information under the CCPA and is collected and held by a third-party exemption-certificate service acting as Gridlock's service provider, not received or retained by Gridlock, and you may exercise the right to limit its use.

4. Sources of Personal Information

Gridlock collects personal information directly from you, automatically from your device when you use the Service, from the Google sign-in service when you authenticate (your name, email, and Google account identifier), and from service providers that support the Service such as the payment processor and the shipping provider.

5. How Gridlock Uses Personal Information

  • To create and manage your account.
  • To process Scan Data and generate insert designs.
  • To process, fulfill, and ship your orders, including price and shipping calculation.
  • To provide customer support and respond to your requests.
  • To operate, maintain, secure, and improve the Service and Gridlock products and methods.
  • To train and improve the automated models that power the Service, including the scan-measurement, product-classification, and insert-design models, using Scan Data, photos, dimensions, and quality-control outcomes from orders. Gridlock uses this data in de-identified or aggregated form where practicable and does not use it to build profiles about you.
  • To detect and prevent fraud, abuse, and security incidents.
  • To comply with legal obligations and enforce the Terms.

6. How Gridlock Discloses Personal Information

Gridlock discloses personal information to service providers that process it on Gridlock's behalf under contract, including the authentication provider, cloud hosting and storage, the payment processor, a tax-exemption certificate service, the shipping and label provider, customer relationship and communication tools, and analytics. Gridlock may also disclose personal information to comply with law or legal process, to protect rights, property, or safety, and in connection with a merger, acquisition, or sale of assets.

GRIDLOCK BOX LLC DOES NOT SELL YOUR PERSONAL INFORMATION AND DOES NOT SHARE YOUR PERSONAL INFORMATION FOR CROSS-CONTEXT BEHAVIORAL ADVERTISING, AS THOSE TERMS ARE DEFINED BY THE CCPA.

7. Data Retention

Gridlock retains personal information for as long as needed to provide the Service, fulfill the purposes described in this Privacy Policy, comply with legal and tax obligations, resolve disputes, and enforce agreements. Retention criteria by category: account information is kept while your account is active and for a reasonable period afterward; order and tax records are kept for the period required by tax and commercial law; scan data is kept for the period needed to produce and support the insert and to improve Gridlock products, then deleted or de-identified; device and log data is kept for a limited operational period. You may request deletion as described below.

8. Security

Gridlock applies administrative, technical, and physical safeguards designed to protect personal information. No method of transmission or storage is fully secure, and Gridlock cannot guarantee absolute security. You are responsible for keeping your account credentials confidential.

9. Your Privacy Rights

Depending on where you live, you may have the following rights:

  • Right to know the categories and specific pieces of personal information collected, the sources, the purposes, and the categories of third parties to which it is disclosed.
  • Right to delete personal information that Gridlock holds about you, subject to legal exceptions. You can delete your account and its associated personal data from within the app (in account settings), request deletion at the web page at https://gridlockbox.com/delete-account, or contact Gridlock using the methods below.
  • Right to correct inaccurate personal information.
  • Right to opt out of the sale or sharing of personal information. Gridlock does not sell or share personal information, so no action is needed, but the right is stated here.
  • Right to limit the use of sensitive personal information. Gridlock does not retain sensitive personal information; any Social Security number that appears on an exemption certificate is held by the third-party exemption-certificate service, not by Gridlock.
  • Right not to receive discriminatory treatment for exercising any of these rights.

To exercise a right, delete your account in the app's account settings, use the web deletion page at https://gridlockbox.com/delete-account, email support@gridlockbox.com, or write to Gridlock Box LLC, 203 Circle, Terre Haute, IN 47803. Gridlock will verify your request by confirming information associated with your account before acting. You may use an authorized agent to submit a request, subject to verification. Residents of other states with privacy laws, including Virginia, Colorado, Connecticut, and Utah, may have similar rights and may use the same contact methods. Residents of those states may appeal a denied request by replying to the decision, and Gridlock will respond within the time those laws require.

10. Children

The Service is not directed to anyone under 18 years of age, and Gridlock does not knowingly collect personal information from anyone under 18. If you believe a person under 18 has provided personal information, contact support@gridlockbox.com and Gridlock will delete it.

11. Camera, Photos, and Scans

The App requests access to your device camera and, on supported devices, depth or LiDAR sensors so that you can capture the product you want to package. Captured photographs, video, depth data, and scans are used to generate an insert design and are uploaded to Gridlock cloud storage for that purpose. These captures are of the product, not of people; the App does not perform facial recognition and does not create biometric identifiers. You can decline or revoke camera access in your device settings, in which case scan-based features will not function.

12. Third-Party Links

The Service may contain links to third-party websites or services that Gridlock does not control. This Privacy Policy does not apply to those services, and Gridlock is not responsible for their content or privacy practices.

13. Where Information Is Processed

Gridlock operates in the United States and processes personal information in the United States. If you access the Service from outside the United States, you understand that your personal information will be processed in the United States.

14. Changes to This Privacy Policy

Gridlock may update this Privacy Policy from time to time. The effective date at the top shows when it was last revised. If a change is material, Gridlock will make reasonable efforts to provide at least 30 days' notice through the Service, and will obtain affirmative consent where the law requires consent for the new processing. This Privacy Policy is notice of Gridlock's practices; continued use does not substitute for any consent the law requires.

15. Contact

For privacy questions or to exercise a right: Gridlock Box LLC, 203 Circle, Terre Haute, IN 47803 Email: support@gridlockbox.com